docker-expert
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard Docker CLI commands (docker build, ps, images, scout) for their intended purposes of analysis and validation.
- [SAFE]: Instructions include clear warnings to the agent to review Dockerfiles and build contexts before execution, acknowledging that builds can execute code and access networks.
- [SAFE]: The skill provides specific advice on secrets management and explicitly warns against printing interpolated secrets when using 'docker compose config'.
- [SAFE]: Usage of tools like 'find' and 'grep' for project structure analysis is restricted to specific file patterns (Dockerfile, docker-compose.yml) and does not target sensitive system paths.
Audit Metadata